Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in sggenmlieh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sggcezgmtn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfnnyznra (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfesdiqyo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfcchuzox (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgeymwpcar (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgekvdhxno (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgccmmheke (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfded640 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfc0e8fa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfb9199b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf727fc0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf72647c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf5770a8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf3481c8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf1d68a9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf126006 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf042efe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in secrequeryabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scallistajxel (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scaljanbfksf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scaljan2momxm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sbc55dd196 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sba517fb66 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb759e41fa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb70efdeba (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb50a0902f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb391423d1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb06ac4700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb01dc8349 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saf368b4bc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saee8cba76 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saeb369b8c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sae6a0e752 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sad01504db (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sacb0f5cd9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sac7635b0f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa9695b9d2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa93cd2c64 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa70855610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa7055ee3e (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa6ed9cec3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa64ce1145 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa62b50d0b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa35a63c8a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa20a7aec4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa00810ac0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwsemi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwjq (RubyGems)
1 compromised version
Page 29 of 71